Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mNMtYUaESpgxZtDS-KTJbU86OF4.roa
File: mNMtYUaESpgxZtDS-KTJbU86OF4.roa (raw, json)
Hash identifier: 0JjkQ/MR1++2MjVjcmtTai8qglxPOlN0etidlHf/lis=
Subject key identifier: 98:D3:2D:61:46:84:4A:98:31:66:D0:D2:F8:A4:C9:6D:4F:3A:38:5E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0199C06DFEE42F9AD4C32CCD013AD307E5D4
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mNMtYUaESpgxZtDS-KTJbU86OF4.roa
Signing time: Tue 07 Oct 2025 20:47:38 +0000
ROA not before: Tue 07 Oct 2025 20:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 45.146.170.0/24 maxlen: 24
45.149.133.0/24 maxlen: 24
193.142.253.0/24 maxlen: 24
194.169.86.0/24 maxlen: 24
195.245.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:6d:fe:e4:2f:9a:d4:c3:2c:cd:01:3a:d3:07:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 7 20:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98d32d6146844a983166d0d2f8a4c96d4f3a385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:91:c5:69:9a:15:df:d3:a9:58:d7:36:fd:
98:13:ad:d8:0d:ac:29:b4:9d:60:0f:6e:36:e0:6a:
c8:21:57:c0:f0:90:59:33:a4:47:a2:22:27:12:a2:
2f:8d:d7:3f:01:05:91:cc:31:73:84:ac:4e:33:46:
de:c4:16:64:b4:ee:ba:40:6e:d2:87:7f:b4:18:de:
7c:89:a0:08:48:22:df:9d:af:aa:55:17:be:c4:62:
9c:27:cc:68:3d:5d:2a:64:42:7a:df:0e:22:9e:36:
22:00:1e:a7:21:3f:5a:10:a3:a2:f3:9e:77:c5:9a:
a6:cc:1e:60:bf:87:73:d3:07:ab:5e:88:7a:79:4f:
e5:30:61:73:54:9f:93:6b:27:c4:fd:db:c8:52:1f:
d1:7d:b3:60:94:e1:85:79:2f:ff:e7:ab:5a:66:28:
76:ef:c0:4d:04:c6:ec:9d:90:77:ba:5a:32:c9:e5:
36:47:49:08:67:25:29:c5:c7:3a:d1:ff:cb:af:0b:
af:dc:32:72:9e:b5:3c:00:0c:b0:ac:fe:e4:47:34:
87:40:97:49:bd:ff:85:d0:1a:f2:0a:48:04:67:df:
20:ec:05:29:2b:4f:4d:f3:ba:48:47:8e:3f:78:d8:
9d:b2:b0:35:87:e4:6a:22:54:25:98:6b:57:22:da:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D3:2D:61:46:84:4A:98:31:66:D0:D2:F8:A4:C9:6D:4F:3A:38:5E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mNMtYUaESpgxZtDS-KTJbU86OF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.170.0/24
45.149.133.0/24
193.142.253.0/24
194.169.86.0/24
195.245.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:31:b8:a7:3a:26:1a:83:6f:ef:66:5d:51:55:a5:20:f6:79:
0b:80:06:b9:e7:eb:d4:16:37:c4:0f:85:b4:25:df:38:ac:10:
3f:0c:64:4b:46:cd:45:2f:22:20:42:7e:56:c4:2b:5a:3c:08:
a8:5e:e1:0c:23:93:9a:1a:38:a6:be:cb:0c:85:e1:eb:9f:df:
2e:d3:34:aa:9d:a8:12:36:41:b8:65:89:e4:43:ec:62:f2:11:
06:f6:43:f1:f1:3a:50:39:06:d4:91:ab:5f:dd:dd:1d:d5:16:
c4:b7:09:21:bc:71:67:db:3b:9e:4f:9a:6c:52:e7:b4:c1:ea:
79:c3:3e:4c:bf:5c:05:f1:f6:09:ff:7a:6d:f3:21:6b:47:2c:
97:2c:db:a2:9f:c3:47:be:52:ca:32:e2:fc:65:9f:e0:4f:89:
8b:38:01:22:bc:6c:6a:aa:2d:57:bc:a2:28:bd:1e:04:0b:86:
66:cf:58:21:c6:63:e9:c1:cd:d0:ff:62:7e:4f:aa:8c:b0:ce:
fe:d4:fd:e9:00:6b:04:e2:81:fb:10:04:46:77:37:e7:33:12:
cd:04:8c:83:5f:b7:ef:76:83:fe:cb:a6:bb:b4:52:07:0b:2a:
17:a6:55:e1:9d:63:af:65:af:9c:42:68:a2:8a:66:5b:7e:a5:
79:6d:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:07 2025 by rpki-client